BastiandClaude Opus 5 b3028f9bd9 Guard plugin-add against git transport-helper URLs (backport of #8067) ...

Backport of the plugin-add URL guard (PR #8067 by @bastidotnet, merged to
quattro as 30471bf3) onto the v4-0-1 release branch.

omarchy-plugin-add cloned a user-supplied git URL without the transport-helper
guard omarchy-theme-install already applies. That guard arrived with #7884,
which is on this branch, but it never touched plugin-add -- so the sibling
command still leaned entirely on git's own protocol.ext.allow=never to keep a
URL like ext::sh -c <cmd> from running a command at clone time.

Stock systems are unaffected: Omarchy sets no protocol.* override, so the git
default holds and there is no live exploit here. This is defense in depth --
it closes the gap #7884 left in the sibling path and drops a silent dependency
on a default the project does not control. Reject ext::/fd:: and leading-dash
forms; https, ssh, scp-style and token-auth URLs still clone, including an
scp-style IPv6 host, which carries :: of its own.

Clean cherry-pick: both files are byte-identical to quattro, so merging v4-0-1
into quattro resolves without a conflict. The guard reads the same as the one
already in bin/omarchy-theme-install on this branch. test/shell passes: 186
files, with the plugin-add suite's new cases all running here -- including the
pty-driven prompt case, which is the only path that reaches the guard's
leading-dash arm.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018DEMYa9UWtroz93DhMTtcV

2026-08-25 08:32:58 +02:00

..

fixtures

Let bar put place a widget on a bar it does not recognize (#6687)

2026-08-11 11:07:14 +02:00

acceptance-helpers-test.sh

Keep the bar mapped while hidden so revealing it is instant (#6677)

2026-08-10 14:10:31 +02:00

agent-invitation-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

agent-usage-claude-limits-test.sh

Let --force actually re-probe the Claude limits endpoint (#6798)

2026-08-13 12:13:41 +02:00

agent-usage-claude-scanner-test.sh

Claude collector: attribute pi usage by provider, not api prefix (#6655)

2026-08-09 13:27:38 +02:00

agent-usage-codex-scanner-test.sh

perf(agents): cut codex usage collector memory with SQL filter and cache (#6780)

2026-08-13 13:47:44 +02:00

agent-usage-fireworks-scanner-test.sh

Add Fireworks balance usage panel (#6488)

2026-08-07 23:49:43 +02:00

agent-usage-update-test.sh

Split agent usage into data files and rename the plugin to omarchy.agents (#6603)

2026-08-07 15:46:10 +02:00

agents-default-migration-test.sh

Split agent usage into data files and rename the plugin to omarchy.agents (#6603)

2026-08-07 15:46:10 +02:00

agents-panel-test.sh

Launch the default agent from the agents widget right-click (#6759)

2026-08-12 18:46:17 +02:00

agents-rename-migration-test.sh

Split agent usage into data files and rename the plugin to omarchy.agents (#6603)

2026-08-07 15:46:10 +02:00

app-search-test.sh

Keep AppLibrary scans out of login shells (#6815)

2026-08-13 19:30:56 +02:00

audio-test.sh

Move panel plugins under panels

2026-05-25 14:47:08 +02:00

background-test.sh

Apply pending shell theme after background polling

2026-06-22 19:57:05 +02:00

bar-icon-geometry-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

bar-test.sh

Stop the bar sticking in move mode after a press-and-hold on a widget (#6943)

2026-08-23 19:11:58 +02:00

bar-text-color-test.sh

Group all the omarchy-bar bins together

2026-07-08 11:49:56 -07:00

bar-widget-contract-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

base-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

battery-status-test.sh

Report live battery power draw

2026-07-20 16:37:33 -07:00

battery-test.sh

Add shell plugin model tests

2026-05-25 14:18:39 +02:00

battlenet-test.sh

Make Battle.net launcher installer-only

2026-06-24 13:31:17 +02:00

bin-style-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

bluetooth-migration-test.sh

Remember Bluetooth on/off through the rfkill soft block (#6682)

2026-08-10 20:27:40 +02:00

bluetooth-test.sh

Stop Bluetooth discovery when the panel closes (#6794)

2026-08-13 10:35:22 +02:00

border-geometry-test.sh

Fix asymmetric rounded shell borders

2026-07-28 21:28:31 -07:00

brcmfmac-supplicant-test.sh

Apply the Broadcom Wi-Fi quirk to Macs without a T2 (#6652)

2026-08-10 22:49:44 +02:00

brightness-display-test.sh

Support external monitor brightness in Quattro (#6490)

2026-08-01 15:35:34 -05:00

browser-env-test.sh

Scope BROWSER to interactive shells so xdg-settings can change the default browser (#6616)

2026-08-07 23:58:51 +02:00

button-border-stability-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

channel-test.sh

Activate dev checkout before updates

2026-07-23 17:05:29 -07:00

chromium-copy-url-test.sh

Free the Copy URL shortcut from ghost extension registrations (#6821)

2026-08-13 22:37:29 +02:00

chromium-whatsapp-slim-test.sh

Free the Copy URL shortcut from ghost extension registrations (#6821)

2026-08-13 22:37:29 +02:00

chromium-ytdlp-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

clipboard-test.sh

Decode mixed UTF-16 clipboard text (#7466)

2026-08-23 19:11:58 +02:00

clock-test.sh

Offer AM/PM clock formats when right-clicking the bar clock (#6536)

2026-08-03 16:29:14 -05:00

compositor-guard-test.sh

Treat the guard test's socket fixture as optional (#6755)

2026-08-12 16:58:46 +02:00

config-test.sh

Offer an AI diagnosis when a process crashes (#6746)

2026-08-12 18:37:40 +02:00

copy-url-shortcut-migration-test.sh

Wait on the profile being repaired, not on every browser (#6837)

2026-08-14 08:59:14 +02:00

crash-capture-test.sh

Add a toggle for crash capture (#6824)

2026-08-13 21:26:08 +02:00

default-agent-test.sh

Keep mise wrappers from writing to stdout (#6940)

2026-08-23 19:11:58 +02:00

desktop-entry-launch-test.sh

Launch apps in their own scope instead of the compositor's cgroup (#6541)

2026-08-04 12:16:54 -05:00

dev-env-path-test.sh

Give SSH commands the user-level tool paths (#6632)

2026-08-08 14:58:29 +02:00

dev-link-test.sh

Add checkout bin to sudoers path

2026-08-11 11:04:50 -04:00

dev-unlink-test.sh

Add checkout bin to sudoers path

2026-08-11 11:04:50 -04:00

dns-sudoers-test.sh

Fall back to polkit when the DNS sudoers grant is missing (#7492)

2026-08-23 19:11:58 +02:00

docker-group-migration-test.sh

Flag a reboot when the docker group changes (backport of #8080)

2026-08-24 19:56:19 +02:00

done-test.sh

Track one-time setup with completion markers

2026-07-16 21:53:15 -07:00

drive-password-test.sh

Prevent empty drive encryption passwords (#6306)

2026-07-18 18:21:39 -07:00

dropbox-test.sh

Add shell bar config commands

2026-05-27 10:41:12 +02:00

editor-env-test.sh

Ensure EDITOR is exported for non-uwsm envs too

2026-07-11 11:42:55 -07:00

emojis-test.sh

Keep sensitive clipboard contents out of history

2026-05-29 15:25:21 +02:00

fingerprint-invitation-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

firewall-config-test.sh

Prepare installer for ISO-owned finalization

2026-06-04 18:38:25 -04:00

first-run-test.sh

Add deferred first-boot provisioning and factory reset (#6621)

2026-08-09 21:54:21 +02:00

floating-terminal-test.sh

Remove redundant Hyprland launch wrapper

2026-07-19 17:36:34 -07:00

herdr-functions-test.sh

Ship herdr alongside tmux (#6406)

2026-08-09 13:57:36 +02:00

hw-display-test.sh

Use the gmux backlight instead of the Touch Bar on T2 Macs (#6597)

2026-08-07 23:59:50 +02:00

hw-external-monitors-test.sh

Treat LVDS panels as internal displays (#6752)

2026-08-13 12:25:25 +02:00

hw-fingerprint-test.sh

Don't let a usbfs claim count as a kernel driver (#6744)

2026-08-12 14:01:58 +02:00

hw-hybrid-gpu-test.sh

Bound the hybrid GPU gate's supergfxctl query (#6799)

2026-08-13 12:37:43 +02:00

hw-nvidia-test.sh

Detect NVIDIA GPUs without waking them (#6712)

2026-08-11 18:34:07 +02:00

hybrid-gpu-test.sh

Stop hybrid GPU mode queries from hanging (#6738)

2026-08-13 12:22:58 +02:00

hyprland-binding-conflicts-test.sh

Ensure we don't register duplicate bindings

2026-08-11 13:20:23 +02:00

hyprland-default-config-test.sh

Bind SUPER + CTRL + a number to the bar's right panels (#6702)

2026-08-11 13:03:20 +02:00

hyprland-focus-app-test.sh

Fix notification focus for agent terminals (#6801)

2026-08-13 20:28:43 +02:00

hyprland-keyboard-layout-test.sh

Let a stray both-Shifts Caps Lock clear itself

2026-07-29 14:49:55 -04:00

hyprland-reload-guard-test.sh

Recover monitors Hyprland brought up with no mode (#6701)

2026-08-11 13:26:24 +02:00

hyprland-session-locked-test.sh

Recover a session lock stranded by a dead shell (#6692)

2026-08-11 11:29:35 +02:00

hyprland-window-close-all-test.sh

Fix graceful window closing before reboot

2026-07-16 21:19:28 -07:00

hyprland-window-test.sh

Fix tiled fullscreen toggle

2026-05-29 15:59:13 +02:00

hyprland-workspace-layout-test.sh

Persist workspace layout toggles across Hyprland reloads

2026-07-23 21:03:43 -07:00

idle-test.sh

Bind the Stay Awake indicator to the idle service

2026-07-21 15:25:49 -07:00

image-picker-test.sh

Stop image picker thumbnail flicker

2026-06-22 17:32:56 +02:00

indicator-contract-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

installed-service-test.sh

Add optional service widgets on shell refresh

2026-06-23 16:22:27 +02:00

keyboard-layout-test.sh

Follow the keyboard being typed on in the layout widget (#6740)

2026-08-12 16:57:57 +02:00

launch-1password-test.sh

Launch 1Password installer when missing

2026-07-22 16:10:45 -07:00

launch-browser-test.sh

fix: fall back to XDG MIME browser handler (#6424)

2026-07-29 17:15:27 -04:00

launch-shell-test.sh

Stop hot-reloading the shell when a package upgrade rewrites it (#6751)

2026-08-12 16:42:37 +02:00

launcher-remove-test.sh

Fix launcher entry removal

2026-06-28 20:46:23 -04:00

lid-close-test.sh

Lock the screen before suspend instead of racing logind for it

2026-07-25 12:35:17 -07:00

limine-cmdline-migration-test.sh

Rebuild boot images the Plymouth migration left stale

2026-08-11 23:35:40 -07:00

locale-env-test.sh

Give non-login shells the system locale

2026-08-10 05:58:56 -07:00

locate-test.sh

Never leave updatedb.conf with two definitions of the same setting

2026-07-26 19:19:33 -07:00

lock-blank-fingerprint-test.sh

Blank the lock screen while the fingerprint reader waits (#6817)

2026-08-13 21:04:47 +02:00

lock-fingerprint-indicator-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

lock-password-overflow-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

lock-stranded-recovery-test.sh

Recover a session lock stranded by a dead shell (#6692)

2026-08-11 11:29:35 +02:00

logging-test.sh

Prepare installer for ISO-owned finalization

2026-06-04 18:38:25 -04:00

manifest-entrypoints-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

media-test.sh

Fix media skip OSD metadata

2026-06-25 06:55:11 -04:00

menu-guards-test.sh

Only offer Update > Extra Themes when there is one (#7775)

2026-08-23 19:11:58 +02:00

menu-images-test.sh

Recover the wallpaper picker after interrupted thumbnails (#6775)

2026-08-13 09:58:15 +02:00

menu-plugin-test.sh

Fix Clone Plugin failing with "unknown clone option" (#6942)

2026-08-23 19:11:58 +02:00

menu-test.sh

Only offer Update > Extra Themes when there is one (#7775)

2026-08-23 19:11:58 +02:00

migrate-notify-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

migrate-scope-test.sh

Unify Omarchy migrations

2026-06-12 13:49:46 -04:00

migrate-wrapper-test.sh

Fix pending migration notifications

2026-07-20 11:07:44 -07:00

monitor-clamshell-scale-test.sh

Leave an auto-scaled internal panel alone in clamshell recovery (#7581)

2026-08-23 19:11:58 +02:00

monitor-modeless-test.sh

Recover monitors Hyprland brought up with no mode (#6701)

2026-08-11 13:26:24 +02:00

monitor-recovery-test.sh

fix(monitor): fix display mirroring recovery and UI state (#6457)

2026-08-11 18:25:44 +02:00

monitor-scaling-test.sh

Persist integer GDK_SCALE when monitor scale is fractional

2026-08-05 08:30:12 -05:00

monitor-state-test.sh

Assert the focused monitor the panel actually reports

2026-08-11 14:16:32 -07:00

monitor-test.sh

Keep display scaling options consistent

2026-07-23 20:37:25 -07:00

network-manager-transition-test.sh

Use omarchy-upgrade-to-quattro

2026-06-21 12:31:06 +02:00

network-password-test.sh

Add Wi-Fi QR sharing to network panel (#6463)

2026-07-31 17:18:42 -04:00

network-qr-test.sh

Extract the Wi-Fi QR share card into its own omarchy.wifiqr panel plugin (#6598)

2026-08-07 12:50:04 +02:00

network-test.sh

Fix passwordless OWE Wi-Fi handling (#7238)

2026-08-23 19:11:58 +02:00

nightlight-test.sh

Move Night Light onto a first-party nightlight service

2026-07-21 15:26:20 -07:00

notification-send-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

notifications-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

nouveau-cursor-test.sh

Force software cursors on nouveau

2026-07-18 21:49:47 -07:00

nvidia-kms-hook-test.sh

Drop the kms hook when the proprietary NVIDIA driver handles early KMS (#6791)

2026-08-13 10:48:18 +02:00

nvidia-kms-migration-test.sh

Drop the kms hook when the proprietary NVIDIA driver handles early KMS (#6791)

2026-08-13 10:48:18 +02:00

osd-test.sh

Give every OSD card exact padding on all four sides

2026-07-24 16:48:14 -07:00

panel-command-path-test.sh

Use PATH for panel helper commands

2026-06-24 13:40:16 +02:00

pkg-drop-test.sh

Make package removal match exact installed names only

2026-07-18 12:31:03 -07:00

plugin-add-test.sh

Guard plugin-add against git transport-helper URLs (backport of #8067)

2026-08-25 08:32:58 +02:00

plugin-clone-test.sh

Prefix plugin clones with the username so shared clones don't collide

2026-08-01 13:13:39 -05:00

plugin-enable-test.sh

Simplify bar plugin management (#6435)

2026-07-29 22:39:55 -04:00

plugin-registry-contract-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

plugin-validate-test.sh

Manage plugins from Setup > Plugins (#6420)

2026-07-29 18:11:32 -04:00

plugins-test.sh

Plugin cloning via menu (#6433)

2026-07-29 21:34:47 -04:00

plymouth-set-test.sh

Stop an installed theme from running code (#7884)

2026-08-23 19:12:29 +02:00

pointer-move-gate-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

polkit-test.sh

Show fingerprint on lock screen and polkit, gated by lid state

2026-07-23 13:51:07 -07:00

power-present-test.sh

Update battery icon promptly on power changes

2026-06-29 10:49:43 -05:00

power-test.sh

Expose the battery percentage toggle through omarchy.power IPC

2026-08-01 15:36:34 -05:00

powerprofiles-set-test.sh

Remember power profile choices per power source across reboots

2026-07-19 09:33:23 -07:00

preinstalls-test.sh

Restore preinstalls from the menu, and match the lists to what quattro ships (#6854)

2026-08-14 12:24:47 +02:00

provisioning-groups-test.sh

Don't put the user in the docker group; make it opt-in (backport of #8056)

2026-08-24 19:54:01 +02:00

refresh-config-test.sh

Need to copy configs from $OMARCHY_PATH so it'll work with the dev link

2026-06-22 18:30:16 +02:00

reminders-test.sh

Add shell plugin model tests

2026-05-25 14:18:39 +02:00

restart-shell-test.sh

Recover a session lock stranded by a dead shell (#6692)

2026-08-11 11:29:35 +02:00

row-border-stability-test.sh

Combine the Omarchy menu and the launcher

2026-07-23 15:04:22 -07:00

runtime-smoke-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

screenrecording-test.sh

Only offer video capture devices as webcams (#6732)

2026-08-13 12:23:48 +02:00

screenshot-sanity-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

setup-form-test.sh

Cover the shared setup form's cancel contract

2026-08-10 03:21:08 -07:00

shell-ipc-display-test.sh

This tmux alert system didn't work as nicely as I imagined

2026-07-27 15:32:56 -07:00

shell-launch-test.sh

Remove redundant Hyprland launch wrapper

2026-07-19 17:36:34 -07:00

sleep-lock-environment-migration-test.sh

Fix sleep lock session environment race (#6493)

2026-08-01 15:38:55 -05:00

sleep-lock-test.sh

Stop the sleep lock budget assertion from flaking

2026-08-10 03:31:17 -07:00

sleep-monitor-test.sh

Release sleep inhibitor after locking (#6436)

2026-07-29 23:21:45 -04:00

snapper-test.sh

Move install-time plumbing out of the setup namespace

2026-08-10 14:14:57 -07:00

snapper-timeline-leak-test.sh

Never leave updatedb.conf with two definitions of the same setting

2026-07-26 19:19:33 -07:00

snapshot-create-test.sh

Fail loudly when a pre-update snapshot isn't actually created (#6580)

2026-08-07 18:44:37 +02:00

ssh-reconnect-test.sh

Clean up the terminal and reconnect when SSH connections drop (#6661)

2026-08-09 19:15:21 +02:00

sudoless-docker-posture-test.sh

Don't put the user in the docker group; make it opt-in (backport of #8056)

2026-08-24 19:54:01 +02:00

synaptic-touchpad-test.sh

Stop a psmouse quirk from failing every install (backport of #7236)

2026-08-24 15:37:29 +02:00

system-lock-test.sh

Wait for ttfx before closing its terminal (#6773)

2026-08-13 11:46:45 +02:00

system-power-test.sh

Refresh shell test fixtures

2026-07-22 17:31:14 -07:00

systemd-test.sh

Fix sleep lock session environment race (#6493)

2026-08-01 15:38:55 -05:00

t2-hardware-test.sh

Stop pipefail from turning grep -q SIGPIPE exits into false negatives (#6614)

2026-08-07 23:43:49 +02:00

tailscale-receive-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

tailscale-test.sh

Expose the shell's remaining UI-only toggles over IPC

2026-08-01 15:44:07 -05:00

terminal-keybinding-migration-test.sh

Migrate terminal Shift+Return bindings

2026-05-29 14:28:03 +02:00

theme-install-guards-test.sh

Stop an installed theme from running code (#7884)

2026-08-23 19:12:29 +02:00

theme-staging-test.sh

Stop an installed theme from running code (#7884)

2026-08-23 19:12:29 +02:00

timezone-test.sh

Fix command injection in theme install, drop tzupdate NOPASSWD (#6694)

2026-08-11 12:31:52 +02:00

tmux-alert-removal-migration-test.sh

Restart the shell unconditionally after every update

2026-08-03 16:52:02 -05:00

toggle-test.sh

Skip compositor tests without recording a failure

2026-08-09 04:29:26 -07:00

tray-menu-test.sh

Skip shell tests when the compositor can't be reached (#6749)

2026-08-12 16:49:15 +02:00

tray-test.sh

Suppress LocalSend's redundant tray item (#6852)

2026-08-14 08:23:45 +02:00

unowned-system-paths-test.sh

Recover from package file conflicts instead of predicting them

2026-07-27 15:50:28 -07:00

update-available-test.sh

Update active dev checkout with system

2026-07-23 15:28:32 -07:00

update-dev-test.sh

Update active dev checkout with system

2026-07-23 15:28:32 -07:00

update-disk-space-test.sh

Prune the package cache before updating (#6734)

2026-08-12 11:56:02 +02:00

update-file-conflict-test.sh

Recover from package file conflicts instead of predicting them

2026-07-27 15:50:28 -07:00

update-lock-test.sh

Prune the package cache before updating (#6734)

2026-08-12 11:56:02 +02:00

update-orphan-test.sh

Improve update and migration flow

2026-06-04 18:38:25 -04:00

update-package-conflict-test.sh

Recognize colored package conflict errors

2026-08-14 00:15:07 -07:00

update-pacman-guard-test.sh

Improve update and migration flow

2026-06-04 18:38:25 -04:00

update-pkg-prune-test.sh

Prune the package cache before updating (#6734)

2026-08-12 11:56:02 +02:00

update-sequence-test.sh

Put a blocked package upgrade back to whoever is updating (#6830)

2026-08-14 09:08:34 +02:00

update-status-test.sh

Split update coordination helpers

2026-07-29 20:04:49 -07:00

upgrade-to-quattro-test.sh

Simplify the Quattro upgrade, and stop it leaving an error bar behind (#6716)

2026-08-11 22:47:39 +02:00

user-theme-test.sh

Preserve user state during theme setup

2026-07-17 07:59:20 -07:00

version-test.sh

Recognize the omarchy-dev package in omarchy-version

2026-07-29 09:15:53 -07:00

voxtype-invitation-test.sh

Run notification click actions as safe argv (backport of #7926)

2026-08-23 19:56:59 -04:00

vscode-theme-test.sh

Select packaged Cursor for theme sync (#6808)

2026-08-13 19:33:22 +02:00

weather-test.sh

Remove obsolete weather status poller (#6555)

2026-08-05 17:43:14 +02:00

whatsapp-slim-test.sh

Make WhatsApp follow the system theme

2026-08-01 12:53:30 -07:00

wifiqr-test.sh

Extract the Wi-Fi QR share card into its own omarchy.wifiqr panel plugin (#6598)

2026-08-07 12:50:04 +02:00

windows-vm-compose-test.sh

Don't put the user in the docker group; make it opt-in (backport of #8056)

2026-08-24 19:54:01 +02:00

windows-vm-test.sh

Disable Windows VM restart at boot

2026-07-29 19:26:26 -07:00

zram-migration-test.sh

Keep the zram fallback until its replacement is installed

2026-07-26 14:37:22 -07:00